CVE-2024-22192

Summary

CVE-2024-22192 affects Ursa, a cryptographic library for blockchains. The library's CL-Signatures implementations include a flaw in the revocation scheme of Ursa's AnonCreds verifiable credential model. This vulnerability enables malicious verifiers to generate unique identifiers for holders presenting Non-Revocation proofs, potentially compromising privacy guarantees. Although Ursa has reached end-of-life status, no fix is expected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.